Some our customers ask to add VRF support in OpenConnect.
- Run OpenConnect server in specific VRF.
- Map OpenConnect interfaces to specific VRF.
I tested point 1. using
set vrf bind-to-all
it works. I could connect to the server and pass traffic, but only to default VRF. Because the created SSL interface was in default VRF.
Also I got errors like:
vyos ocserv[3655]: main[test]:192.168.139.1:45153 main.c:764: connect UDP socket from 192.168.139.1:62934: Network is unreachable